Course Length:

3 Days

Course Description:

This three-day instructor-led course provides the knowledge and skills that IT Professionals need to configure identity and access solutions with Windows Server 2008 Active Directory.

Who Should Attend:

The audience for this course is IT Professionals interested in learning how to implement IDA solutions in an enterprise environment. Most students will be IT professionals who are responsible for integrating applications and platforms with enterprise directory and security services while increasing access to a growing number of customers and partners.

Benefits of Attendance:

Upon completion of this course, students will be able to:

• Describe identity and access solutions.
• Configure Active Directory Certificate Services.
• Deploy and manage certificates.
• Configure Active Directory Lightweight Directory Services.
• Configure Active Directory Federation Services.
• Configure Active Directory Rights Management Services.
• Maintain access management solutions.
• Troubleshoot identity and access solutions.

Prerequisites:

Before attending this course, students must have technical knowledge equivalent to the course 6424: Fundamentals of Windows Server 2008 Active Directory, and technical background knowledge and hands-on experience of Active Directory Domain Services (AD DS from the AD TS foundation exam). This includes technical knowledge equivalent to the course 6425: Configuring and Troubleshooting Windows Server 2008 Active Directory Domain Services.

Course Outline:

• Module 1: Exploring IDA Solutions
  1. Overview of IDA Management
  2. Active Directory Server Roles in IDA Management
  3. Overview of ILM 2007
  4. Lab 1: Exploring IDA Solutions
  5. Explore how Active Directory Server Roles will provide IDA Management solutions
• Module 2: Configuring AD CS
  1. Overview of PKI
  2. Deploying a CA Hierarchy
  3. Installing AD CS
  4. Managing CA
  5. Lab 2: Configuring AD CS
  6. Installing the AD CS Server Role
  7. Issuing and Installing a Subordinate Certificate
  8. Publishing the CRL
• Module 3: Deploying and Managing Certificates
  1. Deploying Certificates by Using AD CS
  2. Deploying Certificates by Using Autoenrollment
  3. Revoking Certificates
  4. Configuring Certificate Templates
  5. Configuring Certificate Recovery
  6. Lab 3: Deploying and Managing Certificates
  7. Configuring AD CS Web Enrollment
  8. Configuring Certificate Enrollment
  9. Configuring AD CS Certificate Revocation
  10. Configuring AD CS Certificate Templates
  11. Managing Key Archival and Recovery
• Module 4: Configuring AD LDS
  1. Installing and Configuring AD LDS
  2. Configuring AD LDS Instances
  3. Configuring AD LDS Replication
  4. Configuring AD LDS Integration with AD DS
  5. Lab 4: Configuring AD LDS
  6. Configuring an AD LDS instance and an application partition
  7. Configuring AD LDS Access Control
  8. Configuring AD LDS Replication
  9. Configuring AD DS and AD LDS synchronization
• Module 5: Configuring AD FS
  1. Overview of AD FS
  2. AD FS Deployment Scenarios
  3. Deploying AD FS
  4. Implementing AD FS Claims
  5. Lab 5A: Configuring AD FS for Federated Web SSO by Using Forest Trust Scenario
  6. Installing the AD FS Server Role
  7. Configuring Certificate Requirements
  8. Configuring the AD FS Web Agent
  9. Configuring the Web Server application on a virtual computer
  10. Configuring the Forest Trust and the Federated Trust Policies
  11. Configuring the Federation Service Within the Internal Network
  12. Configuring the Federation Service Within the Extranet
  13. Testing the AD FS Implementation
  14. Lab 5B: Configuring Active Directory Federation Services by Using Federated Web SSO Scenario
  15. Installing the AD FS Server Role
  16. Configuring Certificate Requirements
  17. Configuring the AD FS Web Agent
  18. Configuring the Web Server application on a virtual computer
  19. Configuring the Federation Trust Policies
  20. Configuring the Account Partner Federation Service
  21. Configuring the Resource Partner Federation Service
  22. Testing the AD FS implementation
• Module 6: Configuring AD RMS
  1. Overview of AD RMS
  2. Installing and Configuring AD RMS Server Components
  3. Administering AD RMS
  4. Implementing AD RMS Trust Policies
  5. Lab 6: Configuring AD RMS
  6. Installing the AD RMS Server Role
  7. Managing AD RMS rights policy templates
  8. Configuring Trust Policies
  9. Testing AD RMS functionality
• Module 7: Maintaining Access Management Solutions
  1. Supporting AD CS
  2. Maintaining AD LDS
  3. Maintaining AD FS
  4. Maintaining AD RMS
  5. Lab 7: Maintaining Access Management Solutions
  6. Configuring CA Event Auditing
  7. Implementing role-based administration in AD CS
  8. Backing up a CA
  9. Reconfiguring AD RMS cluster settings
  10. Generating AD RMS Reports
  11. Configuring AD RMS logging
• Module 8: Troubleshooting IDA Solutions
  1. Troubleshooting AD CS
  2. Troubleshooting AD LDS
  3. Resolving AD FS Issues
  4. Solving AD RMS Issues
  5. Lab 8: Troubleshooting IDA Solutions
  6. Identifying Tools and Troubleshooting Techniques of IDA Solutions